This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json) Hash identifier: WBZVgY/vIoL8ooCMPMmqtSMKrt5VdnO7u3rzSVmIZ2M= Subject key identifier: 87:AA:EB:36:A7:43:DE:47:3F:E1:37:17:44:3C:46:82:23:C0:BC:10 Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Certificate serial: 019C41D83C53FE39ADE95F7F4736A555E402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 10:00:15 +0000 Manifest this update: Mon 09 Feb 2026 10:00:15 +0000 Manifest next update: Tue 10 Feb 2026 10:00:15 +0000 Files and hashes: 1: 2D2Vo659VCE7_dNsyKDY_ySnp_s.roa (hash: LZcXs72e2WHugD8ordyBZAMfRGav21lT1gfAGNPJNRQ=) 2: K-3AW1zodZQo96foEv6vSPWnznA.roa (hash: 3dK44a2XFe/Ax80oJyqlgMjQENi9InYwps3O9K6x3VI=) 3: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: RKJ3v3cIUioalEBToYfdakm8Hn58oDRNXiyK54yHPZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:3c:53:fe:39:ad:e9:5f:7f:47:36:a5:55:e4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa Validity Not Before: Feb 9 10:00:15 2026 GMT Not After : Feb 10 10:00:15 2026 GMT Subject: CN=87aaeb36a743de473fe13717443c468223c0bc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:7a:c5:e6:dc:7e:0b:90:ed:38:cb:3f:95: 85:e8:0f:7f:70:72:a7:ce:a2:9a:3b:6c:b9:92:86: 53:12:3e:c6:ce:50:4d:ec:c4:4c:f6:ac:b8:94:08: d9:0e:87:84:d5:6b:45:ca:6c:62:7a:b3:df:b2:40: 53:0f:48:eb:fb:a8:3e:de:45:c2:09:51:34:9d:94: 5c:6b:54:45:0a:bc:ba:5f:11:23:c2:c0:23:2b:2b: 15:66:0c:c7:89:2a:78:cf:e1:41:0c:d4:5f:86:28: b1:d9:13:72:78:08:47:be:90:21:11:56:84:11:a4: 79:82:ac:c9:20:bd:e3:f4:26:97:28:0f:52:e4:7b: 63:a4:f8:25:46:01:d9:40:90:e9:93:ac:d0:61:2f: 14:4b:6f:fc:57:4f:7f:30:21:7a:d2:6f:fe:21:9b: 55:18:4b:fb:9b:ec:e8:bb:96:59:41:b9:34:fe:38: fa:23:ca:f1:58:d6:53:c8:ec:76:cc:29:5f:5e:85: be:e8:4a:00:9f:07:1e:3f:d9:80:bc:98:06:f1:d8: cd:c3:05:68:1e:6b:a1:14:74:1f:bf:31:53:fa:8a: 17:30:7c:16:3c:b4:ef:c0:ea:87:ae:78:db:6b:49: 4a:3f:56:ec:6b:c6:c1:92:2a:f4:82:92:67:fe:66: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AA:EB:36:A7:43:DE:47:3F:E1:37:17:44:3C:46:82:23:C0:BC:10 X509v3 Authority Key Identifier: keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:bf:c1:3e:d8:25:c7:60:86:c6:1c:7a:b0:97:b3:49:ea:9f: 1e:75:6a:7f:b8:78:43:47:a2:ed:14:2f:4c:9b:22:37:21:86: b6:7a:d0:5b:0a:e5:17:28:c5:9b:0a:28:96:84:56:7f:1b:68: 33:28:0a:6a:a7:25:84:47:84:2e:30:30:c8:ba:84:32:d6:72: 11:1b:2b:4d:fb:dd:e5:6e:03:e1:58:ac:96:00:0c:fc:ea:43: d7:b8:ae:60:24:20:1a:b0:6f:65:6c:91:f7:8c:66:b1:90:3c: 0d:a9:b5:93:7d:a4:76:a5:3a:d3:e0:14:13:9d:e4:8d:6c:4d: f7:dc:4e:b6:59:e7:25:86:47:2d:53:d9:4d:18:15:9a:4d:3e: 74:2c:ba:40:f3:e6:93:7b:1e:08:a6:ed:37:79:46:32:8c:1d: f3:a9:d7:5f:c1:3a:04:4d:e6:27:25:54:47:18:d7:b9:f8:62: 22:76:82:61:a3:50:42:2b:2e:26:4d:67:ba:61:91:67:27:1d: fd:fc:04:fe:1d:76:5e:80:63:d9:d2:f8:46:5d:c8:c5:cb:47: 46:73:34:d5:e0:14:31:54:3e:a4:21:a4:d0:88:7d:ac:63:8c: 6f:24:33:19:64:02:79:c4:cb:da:86:11:3b:b6:0f:73:1d:e7: 31:4c:07:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DxT/jmt6V9/RzalVeQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1 ZWI5YWEwHhcNMjYwMjA5MTAwMDE1WhcNMjYwMjEwMTAwMDE1WjAzMTEwLwYDVQQD Eyg4N2FhZWIzNmE3NDNkZTQ3M2ZlMTM3MTc0NDNjNDY4MjIzYzBiYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArch6xebcfguQ7TjLP5WF6A9/cHKn zqKaO2y5koZTEj7GzlBN7MRM9qy4lAjZDoeE1WtFymxierPfskBTD0jr+6g+3kXC CVE0nZRca1RFCry6XxEjwsAjKysVZgzHiSp4z+FBDNRfhiix2RNyeAhHvpAhEVaE EaR5gqzJIL3j9CaXKA9S5HtjpPglRgHZQJDpk6zQYS8US2/8V09/MCF60m/+IZtV GEv7m+zou5ZZQbk0/jj6I8rxWNZTyOx2zClfXoW+6EoAnwceP9mAvJgG8djNwwVo HmuhFHQfvzFT+ooXMHwWPLTvwOqHrnjba0lKP1bsa8bBkir0gpJn/maxQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeq6zanQ95HP+E3F0Q8RoIjwLwQMB8GA1UdIwQY MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5 LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAr/BPtgl x2CGxhx6sJezSeqfHnVqf7h4Q0ei7RQvTJsiNyGGtnrQWwrlFyjFmwooloRWfxto MygKaqclhEeELjAwyLqEMtZyERsrTfvd5W4D4VislgAM/OpD17iuYCQgGrBvZWyR 94xmsZA8Dam1k32kdqU60+AUE53kjWxN99xOtlnnJYZHLVPZTRgVmk0+dCy6QPPm k3seCKbtN3lGMowd86nXX8E6BE3mJyVURxjXufhiInaCYaNQQisuJk1numGRZycd /fwE/h12XoBj2dL4Rl3IxctHRnM01eAUMVQ+pCGk0Ih9rGOMbyQzGWQCecTL2oYR O7YPcx3nMUwHoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:07 2026 by rpki-client